Clearyvo

Plugin Health – WordPress Plugin Vulnerability Checker

Security and backup

Outdated, abandoned, closed and vulnerable plugins, and fresh-install leftovers.

Download free 0.5.4 Download Site Toolkit free 0.12.2

Checks every installed plugin and theme for updates, known vulnerabilities, removal from WordPress.org and signs of abandonment, and tidies up what a new WordPress left behind (Hello Dolly, sample content, unused default themes) after you confirm.

Free

  • Known vulnerabilities in the installed versions (Wordfence Intelligence, with your free key)
  • Plugins closed on WordPress.org, with the reason
  • Abandoned and untested plugins, PHP requirements
  • Vulnerable themes and WordPress core
  • Fresh-install leftovers in one click: Hello world, Sample Page, the sample comment, Hello Dolly, an unused Akismet and default themes you do not need (one is kept as a fallback)
  • Settings still at their defaults: tagline, "Uncategorized", a user named "admin", plain links

With Clearyvo Pro

  • An email when a new vulnerability affects an installed plugin or theme, or a plugin is closed

One add-on unlocks the Pro features of every checker.

See Clearyvo Pro

Good to Know

  • Premium and custom plugins are not listed on WordPress.org and cannot be checked there.

Where to Get It

Available two ways: as the separate plugin Plugin Health, or as a module of the Site Toolkit plugin. They share settings and results.

WordPress 6.2, PHP 7.4. English interface.

How to Check WordPress Plugins for Vulnerabilities

  1. Install the free Clearyvo Plugin Health plugin (WordPress.org or the Download page), or Site Toolkit and switch on Plugin Health under Site Toolkit → Modules.
  2. Open Plugin Health in the WordPress admin (under Site Toolkit when you use more than one checker) and run the check. It works in short steps, so it finishes on shared hosting and large sites too.
  3. Read the report. Nothing on the site changes until you tick an item and confirm.
  • Security Checker: Configuration mistakes that make WordPress easier to attack.
  • SSL Checker: Certificate, HTTPS redirects and mixed content.
  • Site Backup: Backups in small, resumable steps, with a size report and a standalone restorer.

← All WordPress checkers